Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: Ha5DMWBia1cuN3L+U98+bf882/7xrrcntLy8o+4XaPE=
Subject key identifier: D4:B9:27:87:79:4B:B5:1C:9D:3E:A1:DF:17:70:DF:6C:D2:3C:EC:8F
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019D389C4009CD3881A280A3E902EC6820F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0F9C
Signing time: Sun 29 Mar 2026 08:00:57 +0000
Manifest this update: Sun 29 Mar 2026 08:00:57 +0000
Manifest next update: Mon 30 Mar 2026 08:00:57 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: icHQ/9Nqzys74Mvz0dx84V/WFNNEz17M+yWr766nVwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:40:09:cd:38:81:a2:80:a3:e9:02:ec:68:20:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Mar 29 08:00:57 2026 GMT
Not After : Mar 30 08:00:57 2026 GMT
Subject: CN=d4b92787794bb51c9d3ea1df1770df6cd23cec8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:f5:5a:31:9e:95:28:d7:f5:80:23:b0:48:
51:ae:56:5b:ac:56:2a:61:f8:ec:c3:e5:18:02:f4:
28:b3:28:2b:16:f6:7c:e4:c7:b0:3c:47:fa:cb:2b:
db:96:05:04:26:8e:ba:ac:01:b2:2e:4a:9f:d4:04:
9e:34:42:25:20:b5:4a:99:d2:7e:aa:45:b9:35:36:
9e:70:cf:c3:72:6a:a7:a3:d3:d2:5c:d8:45:43:1a:
4c:b3:9d:d1:12:d8:77:aa:ef:32:c2:bb:27:54:79:
4d:25:46:6a:5b:58:25:9a:8a:a1:cc:ac:ca:46:d1:
7d:fb:02:e4:bd:21:b2:54:52:a3:fa:0f:1a:a3:68:
80:d4:22:4b:32:fb:ea:61:f7:26:69:dc:6d:55:e4:
da:24:31:79:3f:a7:1b:83:23:de:37:8e:e6:69:9e:
c5:8e:16:c9:45:d2:bf:8a:66:e3:31:aa:11:8f:63:
c9:a4:08:a4:87:65:2d:f8:c5:5a:91:41:70:a4:0e:
a2:47:b8:e0:55:15:28:9c:39:bd:7e:2f:31:95:34:
f7:e5:01:a9:c5:dc:5d:d7:4c:2e:60:a4:70:e4:f2:
37:0a:07:51:23:68:6b:76:09:da:dc:6e:91:15:4c:
57:8d:52:0d:d1:3b:57:01:05:fe:69:fb:cd:00:13:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:27:87:79:4B:B5:1C:9D:3E:A1:DF:17:70:DF:6C:D2:3C:EC:8F
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b9:1d:6e:03:18:98:7a:ec:c2:96:96:3d:95:5b:5e:93:82:
e9:73:55:3c:90:a8:42:bf:c9:68:25:5d:5a:1f:e8:19:b9:d2:
12:45:ba:24:62:d3:37:ac:9a:bc:62:1e:8f:8e:33:99:ec:99:
00:a4:bd:49:af:4b:2a:c5:c6:f2:10:3d:4a:0f:44:de:60:7d:
f0:4a:66:e1:2b:3b:ab:b4:67:dd:c4:32:33:81:ec:0a:76:22:
fd:05:e1:40:17:a7:67:86:25:e0:89:3c:46:a6:f0:74:ab:e9:
c7:6d:b7:be:d3:91:b3:52:fc:30:19:8f:ec:a9:86:43:ac:30:
79:d1:dc:d0:6b:a9:d9:79:fb:6b:0e:15:16:2c:c2:26:10:91:
89:35:42:73:3c:55:8f:31:b3:9f:ca:bb:ef:cd:e0:33:7c:6a:
6b:76:1e:59:d8:b8:15:36:2c:02:53:74:19:cb:ce:8d:ab:79:
44:e7:84:5d:de:06:81:01:ef:f1:44:51:0a:9b:3c:17:f3:b4:
5a:ee:a1:1d:33:79:7b:36:b6:18:2c:7c:bf:c4:b5:79:c0:07:
cd:cf:e8:41:d3:1c:53:5e:38:7b:7e:7e:ec:6a:4e:0d:67:99:
6c:c1:b1:cc:ac:3d:6f:28:1d:37:8c:94:79:2a:47:dc:87:1e:
d2:1c:74:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:23 2026 by rpki-client